Skip to content
OpenAdvisories

Archive

16 February 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-27104 Exploited · Ransomware EPSS 57%

    Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endp…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-27103 Exploited · Ransomware EPSS 11%

    Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed ver…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-27102 Exploited · Ransomware

    Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version …

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-27101 Exploited · Ransomware Public exploit

    Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root…

    KEV Nov 3, 2021
  • High 7.1
    CVE-2021-21315 Exploited Public exploit EPSS 91%

    Command Injection Vulnerability

    The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerabili…

    KEV Jan 18, 2022